1. Symantec/
  2. Security Response/
  3. W32.Finaldo.B@mm


Risk Level 2: Low

November 6, 2001
February 13, 2007 11:46:37 AM
Worm, Virus

W32.Finaldo.B@mm is a simple Win32 polymorphic virus that infects Portable Executable (PE) files. It searches for files that have the extensions .scr, .ocx, or .exe, and it inserts itself at the end of the file.

What are Portable Executable (PE) files?
PE files are files that are portable across all Microsoft 32-bit operating systems. The same PE-format executable can be executed on any version of Windows 95, 98, Me, NT, and 2000. Therefore, all PE files are executable, but not all executable files are portable.

A good example of a Portable Executable is a screen saver (.scr) file.

Antivirus Protection Dates

  • Initial Rapid Release version November 7, 2001
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version November 7, 2001
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Douglas Knowles

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube